Privacy Policy

What we collect

• Account data: email address, password (hashed, we never see it in plaintext - authentication is handled by Supabase Auth).
• Site data you provide: brand name, domain, category, competitor names you enter.
• Scan data: the prompts run, the raw responses from AI engines, and derived scores/mentions - this is the core of what the product shows you.
• Free-scan leads: if you use the free tool without an account, we store the email you enter to unlock a report, along with the domain scanned.
• CMS credentials (optional): if you connect WordPress, Shopify, or another platform, we store the access token/API key you provide, solely to publish content you approve.
• Usage/cost data: which features you use and the resulting AI API cost, for billing and abuse-prevention purposes.

What we don't do

We don't sell your data. We don't use your scan data to train any AI model. We don't share your site's competitor list or scan history with any other customer.

Who we share data with

To operate the service, data passes through:

• Anthropic, OpenAI, Perplexity, Google - receive your prompt text when we run a scan (this is how the scan works; they process it per their own API terms).
• Supabase - hosts our database and authentication (Postgres, US region).
• Vercel - hosts the application.
• Resend - sends transactional email (password reset, weekly digests, support).
• Your connected CMS (if any) - receives content you explicitly approve for publishing.

Your rights

You can view and edit your site data any time in Settings. You can delete your account and all associated data permanently from Settings → Danger Zone - this cascades to every scan, audit, content draft, and site under your account. If you used the free tool without an account and want your lead record removed, contact us and we'll delete it.

Data retention

We keep scan history for as long as your account is active, so trend charts remain meaningful. Deleting your account removes this data immediately, except billing records (AI cost ledger), which we retain for accounting purposes without any identifying link to a deleted account.

Cookies

We use essential cookies only: one to keep you signed in (set by Supabase Auth) and one to remember which of your sites is currently selected. Neither is used for advertising or cross-site tracking. See our Cookie Policy for detail.

Contact

Questions about this policy or a data request: reach us through the Support page in your dashboard, or at sravan4576.kumar@gmail.com.